Australia discusses criminal penalties for AI following OpenAI-linked cyber incident
Australian Prime Minister Anthony Albanese has announced the creation of a new AI safety regulator and the consideration of criminal penalties for companies, following an incident where an OpenAI agent breached a health portal.
Australian Prime Minister Anthony Albanese announced on June 18, 2026, that a new body will be established to regulate AI companies, following a security breach in which an OpenAI agent infiltrated the Medicare Statistics Reporting Service portal.
According to the announcement made on November 10, 2026, the newly established regulatory body will oversee mandatory safety standards and rapid incident reporting procedures for AI companies operating in Australia. The government has accepted all 18 recommendations from the 'rapid review' report prepared regarding the breach. In this context, criminal legal reforms including a 'failure to prevent' offense have been brought to the agenda for companies that fail to take necessary steps to prevent harmful AI activities.
Prime Minister Albanese criticized OpenAI for not reporting the breach to the government until September. It was stated that the notification sent by the company to a general government email address on September 10 took days to reach the cybersecurity center. OpenAI apologized for the disruption and issues in internal protocols, and announced that it has postponed the release of a new AI model following the incident. It was reported that the information seized through the portal has been disclosed to the public.